Flaws in Drupal, Ivanti Connect Secure and Synology exploited
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Attackers are actively exploiting unpatched flaws in Drupal Commerce Core, Ivanti Connect Secure, and Synology DSM, according to heise online's English report. Drupal's fix is Commerce Core 3.3.13 or 8.x-2.41 and later.